PHP web application on a LAMP Stack in VPC

Objectives

• Provision a virtual server instance (VSI) in a VPC.
• Install the latest Apache, MySQL and PHP software.
• Host a website or blog by installing and configuring WordPress.
• Configure logging and monitoring to detect outages and monitor for slow performance (optional).
• Resize the VSI (optional).

1. End user accesses the LAMP server running on a VPC using a web browser.
2. The VSI is configured to use data from an encrypted Block Storage volume (optional).

Before you begin

This tutorial requires:

• An IBM Cloud billable account,
• IBM Cloud CLI,
  • IBM Cloud VPC plugin (vpc-infrastructure),
• terraform to use Infrastructure as Code to provision resources,
• jq to query JSON files,
• git to clone source code repository,

You will find instructions to download and install these tools for your operating environment in the Getting started with solution tutorials guide. To avoid the installation of these tools you can use the Cloud Shell.

Create services

In this section, you will provision a VPC, Subnet, Security Group and a Virtual Server Instance (VSI) using the IBM Cloud Shell and the IBM Cloud CLI. VSIs often address peaks in demand after which they can be suspended or powered down so that the cloud environment perfectly fits your infrastructure needs.

If you prefer to use a Terraform template to generate these resources, you can use the template that is available here: https://github.com/IBM-Cloud/vpc-tutorials/tree/master/vpc-lamp and follow the instructions in the README.md. This template can also be used in Schematics.

1. While logged in to your IBM Cloud account, launch the IBM Cloud Shell.
2. In the shell, you are automatically logged into one of the IBM Cloud regions, you can switch to a different region if desired by running the following command:

   ibmcloud target -r <region-name> -g <resource-group>
   

NIC_ID=$(ibmcloud is instance-create vsi-lamp-1 $VPC_ID $(ibmcloud target --output json | jq -r '.region.name')-1 cx2-2x4 $SUBNET_ID --image-id $IMAGE_ID --key-ids $SSHKEY_ID --security-group-ids $SG_ID --json | jq -r '.primary_network_interface.id')

Install Apache, MySQL, and PHP

In this section, you'll run commands to update Ubuntu package sources and install Apache, MySQL and PHP with latest version.

When the server is spun up for the first time, it is possible that it is already running system updates and blocks you from running the commands below, you can check the status of system updates by running ps aux | grep -i apt, and either wait for the automated system updates task to complete or kill the task.

1. Disable interactive mode during updates

   export DEBIAN_FRONTEND=noninteractive
   

2. Update packages

   apt update
   

3. Install the Apache

   apt install apache2 -y
   

4. Install the MySQL

   apt install mysql-server -y
   

5. Install the PHP

   apt install php libapache2-mod-php php-mysql php-common php-cli -y
   

Verify the installation and configuration

In this section, you'll verify that Apache, MySQL and PHP are up to date and running on the Ubuntu image. You'll also implement the recommended security settings for MySQL.

1. Verify Ubuntu by opening the Floating IP address in the browser. You should see the Ubuntu welcome page.

   

2. Review the Apache, MySQL and PHP versions installed by using the following commands.

   apache2 -v
   

   mysql -V
   

   php -v
   

3. Open a mysql prompt.

   mysql
   

4. Run the following commands substituting your password for yourPassword.

   ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'yourPassword';
   

5. Exit the mysql prompt.

   exit
   

6. Run the following script to secure the MySQL database. Choose the options that best fit your preferences or simply press the ENTER key to quickly steps through the setup.

   mysql_secure_installation
   

7. Additionally, you can quickly create a PHP info page with the following command.

   echo "<?php phpinfo(); ?>" > /var/www/html/info.php
   

8. View the PHP info page you created: open a browser and go to http://{FloatingIPAddress}/info.php. Substitute the floating IP address of your VSI. It will look similar to the following image.

Install and configure WordPress

Experience your LAMP stack by installing an application. The following steps install the open source WordPress platform, which is often used to create websites and blogs. For more information and settings for production installation, see the WordPress documentation.

1. Run the following command to install WordPress.

   apt install wordpress -y
   

2. Configure WordPress to use MySQL and PHP. Run the following command to open a text editor and create the file /etc/wordpress/config-localhost.php.

   sensible-editor /etc/wordpress/config-localhost.php
   

3. Copy the following lines to the file substituting yourPassword with your MySQL database password and leaving the other values unchanged. Save and exit the file.

   <?php
   define('DB_NAME', 'wordpress');
   define('DB_USER', 'wordpress');
   define('DB_PASSWORD', 'yourPassword');
   define('DB_HOST', 'localhost');
   define('WP_CONTENT_DIR', '/usr/share/wordpress/wp-content');
   ?>
   

4. Open a mysql prompt and supply your password.

   mysql -u root -p
   

5. Run the following commands substituting your database password for yourPassword and leaving the other values unchanged.

   CREATE DATABASE wordpress;
   CREATE USER 'wordpress'@'localhost' IDENTIFIED BY 'yourPassword';
   GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP,ALTER ON wordpress.* TO 'wordpress'@'localhost';
   FLUSH PRIVILEGES;
   

6. Exit the mysql prompt.

   exit
   

7. Move the WordPress installation to the web server document root.

   ln -s /usr/share/wordpress /var/www/html/wordpress
   mv /etc/wordpress/config-localhost.php /etc/wordpress/config-default.php
   

8. Complete the WordPress setup and publish on the platform. Open a browser and go to http://{FloatingIPAddress}/wordpress/wp-admin. Substitute the floating IP address of your instance. It should look similar to the following image.

   

Configure domain

To use an existing domain name with your LAMP server, update the A record to point to the VSI's floating IP address.

Server monitoring and log management

To ensure server availability and the best user experience, monitoring should be enabled on every production server. Several options are available to monitor your VSI and capture logs in a central location for analysis.

Configure a Bring-Your-Own-Key (BYOK) Encrypted Data Volume (Optional)

The VSI was created with a provider managed encrypted Boot volume of 100 GB, however if you delete that VSI any data you want to safeguard will need to get moved before you delete the VSI. An alternative is to create a Data volume which can be persisted even if the VSI is deleted and attached to a new VSI. You can also encrypt the volume with your own key. If that is your desired outcome, follow the steps outlined below to create a data volume and attach it to your VSI.

1. Create a data volume configuration file.

   VOLUME_ID=$(ibmcloud is volume-create volume-lamp-1 10iops-tier $(ibmcloud target --output json | jq -r '.region.name')-1 --capacity 100 --json | jq -r '.id')
   

   In VPC you also have a choice of using a customer managed encryption key. For storing your own encryption keys, you can use one of two available services: (1) A FIPS 140-2 Level 3 service IBM Key Protect. See the Provisioning the IBM Key Protect service topic in the documentation. (2) A FIPS 140-2 Level 4 service IBM Cloud Hyper Protect Crypto Services, see the Getting started with IBM Cloud Hyper Protect Crypto Services topic in the documentation. While creating the volume you can specify the --encryption-key parameter with the CRN to the encryption key you want to use.

2. Capture the ID of the VSI created earlier by listing all instances and filtering based on the instance name:

   VSI_ID=$(ibmcloud is instances --json | jq -r '.[] | select(.name == "vsi-lamp-1") | .id')
   

3. Attach the data volume to your existing VSI.

   ibmcloud is instance-volume-attachment-add attachment-data-1 $VSI_ID $VOLUME_ID --auto-delete false --json
   

4. Connect to the server with SSH.

   ssh root@$FLOATING_IP
   

5. Configure the newly created data volume on the VSI, run each line below one at a time.

   new_bsv=$(echo $(parted -l 2>&1) | awk 'NR==1{print $2}' | sed 's/:$//')
   parted $new_bsv mklabel gpt
   parted -a opt $new_bsv mkpart primary ext4 0% 100%
   new_part=${new_bsv}1
   mkfs.ext4 -L lamp-data ${new_part}
   mkdir /data
   mount ${new_part} /data
   echo "${new_part} /data ext4 defaults,relatime 0 0" | tee -a /etc/fstab
   mount -a
   

Resize VSI (Optional)

The VSI was created using one of the smallest profiles available in VPC, i.e. 2 vCPU and 4GiB RAM. It is possible based on your usage requirements to increase - or decrease - the amount of vCPU and RAM available, see Resizing a virtual server instance.

1. Capture the ID of the VSI created earlier by listing all instances and filtering based on the instance name:

   VSI_ID=$(ibmcloud is instances --json | jq -r '.[] | select(.name == "vsi-lamp-1") | .id')
   

2. Stop the instance.

   ibmcloud is instance-stop $VSI_ID
   

3. Resize the instance.

   ibmcloud is instance-update $VSI_ID --profile cx2-4x8
   

   You can get a list of alternative profiles by issuing the following command ibmcloud is instance-profiles, note however the restrictions on resizing based on current/target profiles in the Resizing a virtual server instance topic.

4. Start the instance.

   ibmcloud is instance-start $VSI_ID
   

5. You may need to wait a couple of minutes as the VSI is placed on an appropriate host and started. Open a browser and go to http://{FloatingIPAddress}/wordpress. Substitute the floating IP address of your instance. You should be able to access your WordPress page just as you had it before the resizing.

Remove resources

1. In the VPC console, click on Floating IPs, then on the IP address for your VSIs, then in the action menu select Release. Confirm that you want to release the IP address.
2. Next, switch to Virtual server instances, Delete your instance.
3. Once the VSIs are gone, switch to Subnets. Delete your subnet.
4. After the subnets have been deleted, switch to VPC tab and delete your VPC.
5. If you created the optional Data Volume and no longer need it, switch to Block storage volumes tab and delete the volume.

When using the console, you may need to refresh your browser to see updated status information after deleting a resource.

Depending on the resource it might not be deleted immediately, but retained (by default for 7 days). You can reclaim the resource by deleting it permanently or restore it within the retention period. See this document on how to use resource reclamation.

Related Content

• LAMP stack
• Install software on virtual server instances in VPC
• Securely access remote instances with a bastion host